Which of the following is the BEST method for an organization to proactively engage with the security community and offer a structured means of reporting vulnerabilities identified within its systems or applications?
Regularly perform penetration tests
Establish a responsible disclosure program
Develop an incident response team
Implement a formal change management procedure